JerryScript parser_parse_function_arguments function denial of service vulnerability

JerryScript is a lightweight JavaScript engine Jerryscript project . A denial of service vulnerability exists in the JerryScript parserparsefunctionarguments function, which can be exploited by an attacker to cause a denial of service...

Teltonika RUT router 操作系统命令注入漏洞

Teltonika RUT9XX and Teltonika RUT950 are both LET router products from Teltonika Lithuania. An operating system command injection vulnerability exists in Teltonika RUT router versions 00.07.00 through 00.07.03, which stems from the inclusion of an operating system OS command injection...

CVE-2022-4008

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service...

Siemens SIMATIC Cloud Connect 7 Denial of Service Vulnerability

SIMATIC Cloud Connect 7 is an IoT gateway for connecting programmable logic controllers to cloud services and allows field devices with OPC UA server interfaces to be connected as OPC UA clients. A denial of service vulnerability exists in Siemens SIMATIC Cloud Connect 7, which can be exploited b...

AZL-26729 CVE-2023-31490 affecting package frr for versions less than 8.5.1-2

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgpattrpsidsub function...

CVE-2022-48232

In FM service , there is a possible missing params check. This could lead to local denial of service in FM service...

PT-2023-15629 · Unknown · Fm Service

Name of the Vulnerable Software and Affected Versions: FM service affected versions not specified Description: The issue is related to a possible missing parameters check in the FM service, which could lead to a local denial of service. Recommendations: At the moment, there is no information abou...

PT-2023-15750 · Tee · Tee

Name of the Vulnerable Software and Affected Versions: tee service affected versions not specified Description: The issue is related to a possible out of bounds write in the tee service due to a missing bounds check. This could lead to local denial of service and requires System execution...

PT-2023-15640 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

PT-2023-15627 · Unknown · Fm Service

Name of the Vulnerable Software and Affected Versions: FM service affected versions not specified Description: The issue is related to a possible missing parameters check in the FM service, which could lead to a local denial of service. Recommendations: At the moment, there is no information abou...

IBM DB2 Denial of Service Vulnerability (CNVD-2023-64881)

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM DB2, which can be exploited by an attacker to caus...

PT-2023-16945 · Amazon +1 · Amazon Fire Tv Stick +1

Name of the Vulnerable Software and Affected Versions: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5 Insignia TV with FireOS versions prior to 7.6.3.3 Description: An issue with the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are...

CVE-2023-29780

Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes...

SUSE-SU-2023:1928-1 Security update for python-Flask

This update for python-Flask fixes the following issues: - CVE-2019-1010083: Fixed DoS via crafted encoded JSON data bsc1141968...

SUSE-SU-2023:1875-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: - CVE-2022-25881: Fixed regular expression denial of service vulnerability bsc1208744...

SUSE: Security Advisory (SUSE-SU-2023:1876-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2023-35759)

Siemens SIMATIC IPC DiagMonitor is a suite of system monitoring and troubleshooting software from Siemens, Germany.The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as...

CVE-2022-40946

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

Fedora 38 : pdns-recursor (2023-680b2e6af5)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-680b2e6af5 advisory. - Update to 4.8.4 Release notes: https://doc.powerdns.com/recursor/changelog/4.8.html Tenable has extracted the preceding description block directly from the...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:1848-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1848-1 advisory. The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security...